Crimean-Congo hemorrhagic fever virus (CCHFV) is a priority pathogen transmitted by tick bites, with no vaccines or specific therapeutics approved to date. Severe disease manifestations include hemorrhage, endothelial dysfunction, and multiorgan failure. Infected cells secrete the viral glycoprotein GP38, whose extracellular function is presently unknown. GP38 is considered an important target for vaccine and therapeutic design as GP38-specific antibodies can protect against severe disease in animal models, albeit through a currently unknown mechanism of action. Here, we show that GP38 induces endothelial barrier dysfunction in vitro, and that CCHFV infection, and GP38 alone, can trigger vascular leak in a mouse model. Protective antibodies that recognize specific antigenic sites on GP38, but not a protective neutralizing antibody binding the structural protein Gc, potently inhibit endothelial hyperpermeability in vitro and vascular leak in vivo during CCHFV infection. This work uncovers a function of the secreted viral protein GP38 as a viral toxin in CCHFV pathogenesis and elucidates the mode of action of non-neutralizing GP38-specific antibodies.